Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6043E8A4CD8811EF8B49D99A762E951A.roa
File: 6043E8A4CD8811EF8B49D99A762E951A.roa (raw, json)
Hash identifier: pm4kh8tucRgoR5VADyfn45WgF64PCM7lLhXEV1MmR4c=
Subject key identifier: F1:9D:23:1E:4C:8E:24:52:EF:F6:8B:A3:86:44:35:98:CF:7F:58:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01003D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6043E8A4CD8811EF8B49D99A762E951A.roa
Signing time: Wed 08 Jan 2025 06:18:29 +0000
ROA not before: Wed 08 Jan 2025 06:18:25 +0000
ROA not after: Sat 13 Dec 2025 06:18:25 +0000
asID: 984
IP address blocks: 156.252.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65597 (0x1003d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:18:25 2025 GMT
Not After : Dec 13 06:18:25 2025 GMT
Subject: CN=677e18b4-43c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:5c:0c:fc:ba:72:4d:fc:25:45:a1:1f:a5:
3a:05:72:cf:40:21:83:d2:9f:5e:d1:c4:18:69:af:
d6:fe:4c:69:8e:65:a5:a7:6b:fa:5d:43:90:92:79:
dd:53:85:ba:db:33:fd:3d:53:ac:e3:8c:2e:72:84:
29:2c:32:62:2d:24:2b:0a:5f:35:28:d6:fd:95:26:
8f:df:f6:78:9b:73:01:cc:41:5d:df:09:35:56:07:
3b:43:99:9f:e8:77:64:41:4d:ce:51:d4:f6:96:5d:
04:6a:84:27:1d:ee:fc:19:34:f8:a5:d2:fa:16:f5:
af:8e:bc:52:76:e9:b8:55:07:0e:17:3d:6c:9c:23:
c8:45:73:7d:e9:70:2c:d5:3e:f6:0d:dc:70:9d:6d:
c6:08:60:76:6c:40:71:ac:35:4b:60:70:2a:d4:7d:
c1:52:c1:87:f8:c6:1f:8f:98:aa:9b:bd:b4:9f:ed:
90:25:d2:84:aa:16:ab:bd:f6:5d:a4:d6:71:68:a0:
56:71:33:5a:94:06:ca:1b:e6:5c:c1:08:13:c9:57:
c7:f8:95:ce:77:52:41:63:9b:0f:6d:b8:db:84:5e:
93:8a:af:6d:f5:56:cb:66:7a:d1:87:14:83:52:7c:
67:eb:1e:b6:69:2e:42:19:55:7f:3f:cf:f8:3d:cd:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:23:1E:4C:8E:24:52:EF:F6:8B:A3:86:44:35:98:CF:7F:58:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6043E8A4CD8811EF8B49D99A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.44.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1d:c0:5b:31:9d:a1:a0:f8:65:a5:ec:95:9a:94:71:13:a3:
8a:58:85:94:d9:49:b6:3d:10:e8:28:79:6f:d5:4e:b8:75:a7:
28:c4:73:48:8c:f8:57:4e:1b:00:e5:ca:4b:03:66:3b:4e:38:
d5:55:14:fb:f2:c1:f3:1d:0e:95:f7:68:48:45:4f:f2:79:3a:
81:ca:4e:37:18:ee:5d:99:bd:88:1a:93:cd:90:fc:da:15:8e:
b6:99:c3:f5:4a:c7:b7:32:a2:1e:20:80:64:b9:5f:33:f0:90:
e2:29:04:d0:1f:1d:ae:86:a3:eb:28:96:c7:51:66:09:d1:dd:
d2:c1:8e:67:01:03:94:2a:29:a9:26:4b:9f:e9:30:ef:ef:96:
e0:c1:2b:38:11:31:72:8d:11:4e:96:ab:25:56:6c:fb:55:a1:
b2:54:5d:30:3a:0b:ed:22:e3:b3:65:e3:07:9b:d8:71:64:c6:
36:f7:a1:82:cf:f4:71:e5:98:f8:a7:23:7f:32:00:32:b6:b3:
4e:73:e3:61:77:80:c5:4a:63:2b:b2:da:d4:cc:4e:4d:12:09:
8a:3b:30:24:41:42:f8:52:e3:36:08:5d:3a:81:f8:57:d6:51:
d5:f1:32:fd:c9:10:9c:91:6a:2c:b8:f8:5f:53:81:c6:48:4e:
ba:89:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:14 2025 by rpki-client